Top 30 Advanced Cloud Platforms Concepts Quiz
30 advanced multiple-choice Cloud Platforms concept questions, the corners that separate having used it from understanding it: internals, edge cases, and the reasons behind the design. They come from 30 bites in the Cloud Platforms library, the hardest slice of the 167 Cloud Platforms concept questions in the library. Answer them here or read straight down. Every question carries the correct option, why it is correct, and a link to the bite it came from.
AWS, Azure, GCP, serverless, managed services
30 questions. Pick an answer, or open “Show the answer” to read it.
Answers are graded in your browser. Nothing is saved, and no XP or streak is earned here. The app keeps score.
Question 1 of 30
Which strategic objective is the most compelling reason for an organization to adopt a multi-cloud strategy, despite its inherent operational complexities?
Show the answer
Answer: a · To gain negotiating power with providers and enhance resilience against outages or service deprecation.
The card states multi-cloud's purpose is to 'mitigate these risks by distributing workloads... providing leverage and resilience,' and lists 'avoid vendor lock-in' and 'increase resilience' as key reasons. While cost savings can be a factor, the card warns that 'the added engineering complexity might erase any gains from better pricing,' making it less compelling than resilience and vendor lock-in avoidance.
Read the full bite: Multi-cloud: Spreading Bets Across Cloud Providers
Question 2 of 30
Which application characteristic would make a FaaS solution generally less cost-effective or suitable compared to traditional server-based hosting?
Show the answer
Answer: b · The application is a long-running, stateful service with consistent, high throughput.
The card explicitly states to "Avoid FaaS for long-running, stateful applications or tasks with constant, high-throughput workloads" because the pay-per-invocation model can become more expensive than a dedicated server for sustained traffic. The other options describe scenarios where FaaS is highly suitable due to its event-driven nature and automatic scaling capabilities.
Question 3 of 30
Which type of workload is generally LEAST appropriate for AWS Spot Instances?
Show the answer
Answer: d · A primary, stateful production database
Spot Instances are explicitly advised against for critical production databases or stateful applications due to their potential for sudden interruption. The other options (batch processing, data analysis, CI/CD) are all cited as suitable use cases because they are fault-tolerant and can handle interruptions.
Read the full bite: Spot Instances: Trade Reliability for Huge Cost Savings
Question 4 of 30
When is a bare metal instance the most appropriate choice over a virtual machine?
Show the answer
Answer: b · To host a high-frequency trading platform requiring consistent, ultra-low latency and direct hardware access.
Bare metal instances are ideal for performance-critical workloads like high-frequency trading that require consistent low latency and direct hardware access, bypassing virtualization overhead. Virtual machines, on the other hand, are better suited for rapid auto-scaling to handle unpredictable traffic spikes, which bare metal instances lack.
Read the full bite: Bare Metal Instances: Your Own Dedicated Cloud Server
Question 5 of 30
Which AWS Placement Group strategy is best for a large distributed database to minimize correlated hardware failures?
Show the answer
Answer: d · Partition, to distribute instances across logical hardware segments, reducing single point of failure impact.
Partition placement groups are designed for large distributed systems like Kafka or Cassandra, allowing instances to be spread across logical hardware partitions to reduce the chance of multiple nodes failing from a single hardware issue. While Spread groups also offer isolation, they are typically recommended for a small number of critical instances, not large distributed databases, due to the potential to exhaust distinct hardware.
Read the full bite: AWS Placement Groups: Control Where Your Instances Run
Question 6 of 30
What unique capability does an AWS Dedicated Host offer that is essential for specific software licensing and strict regulatory compliance?
Show the answer
Answer: b · Exclusive use of an entire physical server, with visibility into its underlying hardware.
Dedicated Hosts provide exclusive use of a physical server and visibility into its hardware, which is critical for 'bring your own license' (BYOL) software tied to physical cores and for meeting compliance requiring physical isolation. Option C describes EC2 Dedicated Instances, which offer isolation but lack the full server control and hardware visibility for per-core licensing.
Read the full bite: AWS Dedicated Hosts: Your Own Physical Server in the Cloud
Question 7 of 30
With Object Versioning enabled, what is the immediate effect of a PUT request that would normally overwrite an existing file?
Show the answer
Answer: a · A new version of the file is created, and the previous version remains accessible.
The card explicitly states that when versioning is enabled, a PUT request 'you're not replacing it; you're creating a new version' while the old version is retained. Option D describes the behavior of storage without versioning, which is precisely what versioning aims to prevent.
Read the full bite: Object Versioning: A Safety Net for Cloud Files
Question 8 of 30
Why would an application use a presigned URL instead of proxying a private file download through its own server?
Show the answer
Answer: d · To reduce server load and improve efficiency by offloading file transfer.
The card states that proxying large files through the server is "inefficient and costly" and that presigned URLs allow the browser to download "directly from cloud storage," meaning the server doesn't handle the file stream, thus reducing server load. Option C is incorrect because the client doesn't authenticate with the cloud provider; the presigned URL itself contains the necessary authentication for that specific request.
Read the full bite: Presigned URLs: Temporary Access to Private Files
Question 9 of 30
What fundamental problem does a storage gateway primarily solve in a hybrid cloud setup?
Show the answer
Answer: d · Bridging the protocol gap between on-premise applications and cloud storage APIs.
A storage gateway's core function is to translate traditional on-premise storage protocols (like NFS or iSCSI) into cloud-native API calls (like REST), allowing legacy applications to use cloud storage without modification. It does not eliminate all local storage, nor is it suitable for latency-sensitive applications.
Read the full bite: Storage Gateway: Your On-Prem to Cloud Translator
Question 10 of 30
What is the fundamental trade-off that eventual consistency embraces in distributed systems?
Show the answer
Answer: d · It prioritizes continuous system uptime and responsiveness over immediate, global data consistency.
Eventual consistency's core principle is to prioritize high availability and system responsiveness, allowing temporary data inconsistencies across replicas. Option A describes a characteristic of strong consistency, where reads are guaranteed to be up-to-date, which is the opposite of eventual consistency's approach during the replication window.
Read the full bite: Eventual Consistency: Availability Over Immediacy
Question 11 of 30
A developer wants to ensure users are directed to the closest available server. Which statement accurately distinguishes between Geolocation and Latency-based routing for this goal?
Show the answer
Answer: b · Geolocation routes based on the user's IP address mapping to a physical region, while Latency-based routing directs traffic to the server with the lowest measured network round-trip time from the user.
Geolocation routes based on the user's inferred physical location, which may not always correspond to the lowest network latency. Latency-based routing actively measures or estimates the network delay to various endpoints to direct users to the fastest available server, directly addressing the 'closest available server' goal based on network performance.
Read the full bite: DNS Routing Policies: Directing Traffic with Intention
Question 12 of 30
For a financial firm moving petabytes of sensitive data to the cloud and running a hybrid analytics platform needing guaranteed low-latency access, which networking solution is best?
Show the answer
Answer: b · Implementing Cloud Direct Connect with appropriate Virtual Interfaces.
Cloud Direct Connect is designed for large-scale data transfers and hybrid applications requiring consistent, low-latency, and secure communication, precisely matching the firm's needs. A site-to-site VPN (D) is less suitable for petabytes of data and guaranteed low-latency, while the public internet (C) lacks the necessary predictability, security, and performance guarantees. Option A describes a non-standard or overly simplified approach, as Direct Connect involves specific colocation facilities and managed services, not a direct unmanaged link to the provider's core.
Read the full bite: Cloud Direct Connect: A Private Lane to the Cloud
Question 13 of 30
What is the primary capability that Global Server Load Balancing (GSLB) offers beyond a standard local load balancer?
Show the answer
Answer: d · Automatically redirecting user requests to the healthiest and closest data center globally.
GSLB's core function is to intelligently route users to the best data center globally for high availability and reduced latency, which local load balancers cannot do. While GSLB enhances availability, it operates at the DNS layer, meaning changes are not instantaneous or session-aware due to DNS caching, making option A incorrect.
Read the full bite: Global Server Load Balancing (GSLB): DNS for High Availability
Question 14 of 30
Which of the following tasks is LEAST suitable for implementation using CDN Edge Computing?
Show the answer
Answer: c · Processing and storing large user-uploaded video files in a persistent database.
CDN Edge Computing is designed for small, latency-sensitive, stateless tasks with strict resource limits, not for long-running, heavy computations or operations requiring persistent database connections like processing and storing large files. Options A, B, and D are explicitly mentioned or fit the criteria for suitable edge functions.
Question 15 of 30
Which principle best describes the fundamental shift in security approach embodied by Zero Trust?
Show the answer
Answer: c · Requiring explicit verification for every access request, regardless of its origin or prior trust.
Zero Trust's core principle is "never trust, always verify," meaning every access request is authenticated and authorized, even from within a supposedly trusted network. Distractor A describes the outdated "castle-and-moat" model, which Zero Trust replaces.
Question 16 of 30
What is the primary security challenge a Cloud Security Posture Management (CSPM) solution is designed to address?
Show the answer
Answer: c · Continuous identification and prioritization of cloud resource misconfigurations and compliance deviations.
The card explicitly states CSPM was created to "prevent security gaps caused by misconfiguration, which is a leading cause of cloud breaches" and details its continuous evaluation against security rules and compliance. Distractor A describes real-time threat defense, which the card notes CSPM is not designed for.
Read the full bite: CSPM: A Single Pane of Glass for Cloud Security
Question 17 of 30
According to the card, what is the primary distinction between data sovereignty and data residency?
Show the answer
Answer: b · Data sovereignty refers to the legal jurisdiction governing data, and data residency is the physical location chosen for compliance.
The card defines data sovereignty as the data's "citizenship" or legal jurisdiction, and data residency as its physical "address" or storage location chosen to satisfy those legal rules. Option C incorrectly swaps these definitions, which is a common misunderstanding.
Read the full bite: Data Sovereignty: Your Data's Legal 'Citizenship'
Question 18 of 30
In the context of cloud security, what is the fundamental purpose of a compliance framework?
Show the answer
Answer: c · To provide a standardized set of auditable security controls for users to implement and verify.
A compliance framework defines specific, auditable security requirements that users must implement and verify, acting as a standardized rulebook. It does not automatically implement controls, nor does it solely certify cloud providers or replace all internal security policy development.
Read the full bite: Cloud Compliance Frameworks: Security as a Standard
Question 19 of 30
For which type of application workload is a serverless database most advantageous?
Show the answer
Answer: c · An application experiencing highly variable traffic, with long idle periods and sudden spikes.
Serverless databases are designed for highly variable and unpredictable workloads, automatically scaling resources up and down, including to zero during idle periods to optimize costs. Option A describes a workload where a traditional provisioned database might be more cost-effective due to consistent demand.
Read the full bite: Serverless Databases: Pay for Use, Not for Idle
Question 20 of 30
Which scenario would be an inappropriate application for a cloud data warehouse?
Show the answer
Answer: a · Providing real-time data for a user-facing mobile application's operational backend
Cloud data warehouses are optimized for Online Analytical Processing (OLAP) workloads, such as complex queries on historical data, not for high-frequency, low-latency read/write operations required by user-facing applications (OLTP). Using it for OLTP would lead to poor performance and high costs.
Read the full bite: Cloud Data Warehouse: Analytics Without the Hardware
Question 21 of 30
Which scenario best highlights the core advantage of a managed graph database over a traditional relational database?
Show the answer
Answer: a · Efficiently querying deep, interconnected relationships between data points.
The card states graph databases were created to make traversing complex, multi-level connections a primary, fast operation, which is their core advantage. While other options describe benefits of various database types, they do not represent the specific strength of graph databases for relationship-heavy data.
Read the full bite: Managed Graph Databases: When Relationships Are the Data
Question 22 of 30
A software architect is designing a system to collect millions of sensor readings per second. Which characteristic makes a managed time series database (TSDB) the most suitable choice for this task?
Show the answer
Answer: c · Its optimization for massive write volumes and queries filtered by time.
Managed TSDBs are specifically designed for high-volume writes and queries that are predominantly filtered and aggregated by time, which general-purpose databases struggle with. They are not suited for highly relational data or frequent updates, nor do they process data without persistent storage.
Question 23 of 30
Which statement accurately describes a fundamental architectural characteristic of a global database?
Show the answer
Answer: b · It designates a single primary region to handle all write operations, with others serving as read-only replicas.
The card explicitly states that "A global database has a single write primary; all other regions are read-only replicas," meaning only one region handles all write operations. Option A is incorrect because replication is asynchronous, not immediate, introducing a small lag before consistency across all regions.
Read the full bite: Global Database: One Logical DB, Multiple Regions
Question 24 of 30
A developer is migrating an on-premises Oracle database to Amazon Aurora PostgreSQL. What crucial step must be completed before using AWS DMS for data transfer?
Show the answer
Answer: b · Use AWS Schema Conversion Tool (SCT) to convert the Oracle schema to PostgreSQL.
AWS DMS is a data migration tool, not a schema conversion tool for heterogeneous migrations. The card explicitly states that for migrations between different database engines, AWS Schema Conversion Tool (SCT) must be used first to convert the schema. Provisioning a replication instance (Option D) is a step within configuring DMS, but the schema conversion must precede it for heterogeneous migrations.
Question 25 of 30
Which issue is primarily addressed by adopting an immutable deployment strategy?
Show the answer
Answer: d · Elimination of configuration drift and 'snowflake server' issues.
Immutable deployments are designed to solve the problem of configuration drift and 'snowflake servers,' where servers diverge over time, leading to unpredictable behavior. While optimized images can contribute to faster startup times, it is not the primary problem this strategy addresses.
Read the full bite: Immutable Deployments: Treat Servers Like Cattle, Not Pets
Question 26 of 30
Which task is generally considered an inappropriate use case for .ebextensions?
Show the answer
Answer: d · Provisioning and managing the lifecycle of a shared Amazon RDS database instance.
The card explicitly states to "Avoid using .ebextensions for ... managing resources with a lifecycle independent of your application, like a shared database." .ebextensions are designed for customizations tied to the application's lifecycle, not for independent resource management. The other options are all explicitly mentioned as appropriate use cases for .ebextensions.
Read the full bite: .ebextensions: Infrastructure as Code for Elastic Beanstalk
Question 27 of 30
What significant advantage does Cloud Native Buildpacks' layered image structure offer for application maintenance?
Show the answer
Answer: c · It enables the base operating system to be updated for security patches without rebuilding application-specific layers.
The correct answer describes the "rebasing" capability, a core benefit of buildpacks' layered architecture that allows for rapid security patching of base images. Distractor A is incorrect because buildpacks are opinionated and abstract away fine-grained build control from developers, rather than providing it.
Read the full bite: Cloud Native Buildpacks: No More Dockerfiles
Question 28 of 30
What is the primary operational burden that a managed Kubernetes service aims to remove from its users?
Show the answer
Answer: b · The maintenance, patching, and high availability of the Kubernetes control plane.
The card explicitly states that managed services exist to "abstract away this operational nightmare" of running the control plane, handling its high availability, patching, and upgrades. While users still manage their applications and worker nodes, the control plane's operational burden is removed. Option C is incorrect because users are still responsible for managing and scaling their application pods on the worker nodes.
Read the full bite: Managed Kubernetes: Your Cloud's K8s Control Plane
Question 29 of 30
Which statement accurately describes a fundamental operational characteristic of the Horizontal Pod Autoscaler (HPA)?
Show the answer
Answer: b · It adjusts pod replicas based on real-time metrics, which can introduce latency for sudden, massive load increases.
The HPA is explicitly stated to "react to" current load, not predict it. This reactive nature means there's an inherent delay between a sudden spike and the HPA's response, especially for applications with long startup times. Option D is a common misconception, as HPA does not proactively forecast traffic.
Read the full bite: Horizontal Pod Autoscaler (HPA): Scale on Demand
Question 30 of 30
What is the primary advantage of using a serverless state machine for multi-step processes?
Show the answer
Answer: a · It externalizes complex coordination logic, state, and error handling.
The card states that state machines externalize workflow logic, manage state persistence, and handle retries/errors, which is their primary advantage. They are explicitly not recommended for low-latency synchronous patterns or replacing simple in-function control flow.
Read the full bite: Serverless State Machines: The Conductor for Your Functions
Could you explain these out loud?
That is what an interview actually tests. Tezvyn gives you questions like these with what the interviewer is really checking, the answer that lands, and the mistake that ends the conversation, in the four minutes before your next meeting.
The iPhone app is on the way
We are building it. Until it lands, nothing here is held back from you: every interview card, your saved cards, streaks and the job board all work in Safari, plus hundreds of free practice quizzes of thirty questions each. Sign in and it all carries over to the app the day it arrives.
Want it as an icon? Tap Share at the bottom of Safari, then Add to Home Screen. It opens full screen and the cards you have read stay available offline.